S3 Same-Region Replication (SRR) vs Cross-Region Replication (CRR)

#aws #s3 #replication #security

Overview

This document is to evaluate and provide guidance on the benefits/feature of Amazon S3’s SRR and CRR replication strategy.
Replication enables automatic, asynchronous copying of objects across Amazon S3 buckets. Buckets that are configured for object replication can be owned by the same AWS account or by different accounts.
Replication can be achieved within the same AWS Region or different AWS Region.

Use Cases

Same-Region Replication (SRR)

Automatically replicates data between buckets within the same AWS Region.
Replication can be setup at a bucket level, a shared prefix level, or an object level using S3 object tags.
SRR can be use to make a second copy of data in the same AWS Region.
Helps to address data sovereignty and compliance requirements by keeping a copy of your data in a separate AWS account in the same region as the original.
Allows to change account ownership for the replicated objects to protect data from accidental deletion.
Allows to aggregate logs from different S3 buckets for in-region processing, or to configure live replication between test and development environment.

Observations

Both source and target buckets must be version enabled.
Object deletions are not replicated to target bucket (so it’s not like rsync — delete).

Cross-Region Replication (CRR)

Automatically replicates data between buckets across different AWS Regions.
Provides ability to replicate data at a bucket level, a shared prefix level, or an object level using S3 object tags.
CRR provide lower-latency data access in different geographic regions.
CRR can help with compliance requirement to store copies of data hundreds of miles apart.
Allows to change account ownership for the replicated objects to protect data from accidental deletion.

Security

Objects are remained encrypted throughout the replication process.
The encrypted objects are transmitted securely via SSL within the same region (if using SRR) or from the source region to the destination region (if using CRR).

Pricing for S3 Replication

For CRR and SRR, Amazon S3 charges for storage in the selected destination S3 storage class, in addition to the storage charges for the primary copy, and replication PUT requests.
For CRR, you will be charge for inter-region Data Transfer OUT from Amazon S3 to your destination region.
Pricing for the replicated copy of storage is based on the destination AWS Region, while pricing for requests and inter-region data transfers are based on the source AWS Region.

DEV Community